Skip to content

Small and lightweight x86-64 VBR bootkit for research purposes

License

Notifications You must be signed in to change notification settings

thejanit0r/x86_vbrkit

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

x86_vbrkit

x86_vbrkit is a small and lightweight FAT32 VBR (Volume Boot Record) bootkit for research purposes, with the intention to simplify the application of chained patches and the deployment of multiple stages. It is fully C99 compliant.

Build

Requirements: gcc, nasm and qemu-utils

make clean && make all

Usage

Tested with VMWare and a Windows 10 x64 VM (MBR).

To interact with the virtual machine through a serial port add a Serial Port device and configure it to use a socket (named pipe) from Client to An Application, with Yield CPU on poll checked in order to allow the guest OS to use the serial port in polled mode (as opposed to interrupt mode). Before starting the VM, execute the following command:

socat -d -d unix-listen:/tmp/serial0 stdio

License

x86_vbrkit is licensed under the Apache License, Version 2.0

About

Small and lightweight x86-64 VBR bootkit for research purposes

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published